Learn the purpose, responsibilities, and operating model of an enterprise SOC and MDR service.
Understand the roles of internal cybersecurity teams and managed security service providers.
Study the lifecycle of security events, alerts, incidents, investigations, and escalations.
Learn how security telemetry from endpoints, identity systems, email, firewalls, cloud platforms, servers, and applications supports threat detection.
Review how SOC analysts investigate alerts and differentiate potentially malicious activity from false positives and expected behavior.
Learn how detection rules, correlation logic, threat intelligence, automation, and analyst judgment contribute to security monitoring.
Observe appropriate SOC investigation and triage processes.
Examine how incidents are escalated and how additional cybersecurity teams or business stakeholders become involved.
Learn the role of automation, orchestration, AI, and MDR technologies within modern security operations.
Examine SOC processes and workflows to identify opportunities for increased efficiency, improved detection, better escalation, or reduced operational friction.
Compare classroom cybersecurity concepts and frameworks against real-world SOC operations.
Discuss observations and recommendations with cybersecurity engineers, analysts, and leadership.
Document findings through diagrams, workflows, summaries, and presentations.
Develop and deliver a final presentation summarizing the internship experience, observations, and recommended opportunities for improving SOC operations.
Required Qualifications
Currently pursuing a bachelor’s or master’s degree in
Cybersecurity
Information Security
Computer Science
Information Technology
Information Systems
Computer Engineering
Network Engineering
Or a closely related technical discipline
Proficiency in 1 or more operating systems.
Minimum 3.0 GPA
Experience with Microsoft Office, Windows,
Must be legally authorized to work in the United States without company sponsorship now and in the future
DESIRED
Strong interest in cybersecurity operations and incident detection/response.
Strong analytical and problem-solving skills.
Ability to research unfamiliar technical concepts and communicate findings clearly.
Effective written and verbal communication skills.
Ability to work collaboratively with technical professionals.
Familiarity with cybersecurity concepts and best practices.
Exposure to security or compliance frameworks such as NIST, ISO 27001, or SOC 2.
Understanding of cloud technologies and SaaS applications.
Experience with data analysis or reporting tools.
Relevant coursework or certifications in cybersecurity or information security.
Professionalism when working with confidential or sensitive cybersecurity information.
Working Conditions
This position is considered OFFICE WORK which is characterized as follows.
Almost exclusively indoors during the day and occasionally at night
Occasional exposure to airborne dust in the workplace
Work surface is stable (flat)
Physical Activity/Requirements
.
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.
This position is considered LIGHT work.
OCCASIONAL
FREQUENT
CONSTANT
Lift up to 20 pounds
Climbing, stooping, kneeling, squatting, and reaching
Lift up to 10 pounds
Standing
Repetitive movements of arms and hands
Sit with back supported
